I want to display total transactions without where condition in result with other fields which has specific where condition, for.eg  | eval totalResponseTime=round(requestTimeinSec*1000), | convert num("requestTimeinSec") | rangemap field="totalResponseTime" "totalResponseTime"=0-3000 | rename range as RangetotalResponseTime | eval totalResponseTimeabv3sec=round(requestTimeinSec*1000) | rangemap field="totalResponseTimeabv3sec" "totalResponseTimeabv3sec"=3001-60000 | rename range as RangetotalResponseTimeabv3sec | eval Product=case( (like(proxyUri,"URI1") AND like(methodName,"POST"))OR (like(proxyUri,"URI2") AND like(methodName,"GET"))OR (like(proxyUri,"URI3") AND like(methodName,"GET")),"ABC") | bin span=5m _time | stats count(totalResponseTime) as TotalTrans count(eval(RangetotalResponseTime="totalResponseTime")) as TS<3S count(eval(RangetotalResponseTimeabv3sec="totalResponseTimeabv3sec")) as TS>3SS by Product URI methodName _time | eval TS<XS=case( Product="ABC",'TS<3S') | eval TS>3S = 'TotalTrans'-'TS<XS' | eval SLI=case(Product="ABC",round('TS<3S'/TotalTrans*100,4)) | rename methodName AS Method | where (Product="ABC") and (SLI<99) | stats sum(TS>3S) As AvgImpact count(URI) as DataOutage by Product URI Method | fields Product URI Method TotalTrans SLI AvgImpact DataOutage | sort Product URI Method ... View more

I need to create a dashboard in which dropdown will have two values "Yesterday" and "last week" (basically compares today's data with "Yesterday" and "last week" -- this part is completed). Now I need to display only today's data in panels before user selects any input from drop-down menu. How can I achieve that ?   ... View more